When you add a customer in the Partner Sales Console, you get access to the customer's Google Admin console.
Customers can restrict your access even if you're contractually obligated to provide them full support. It's important that you and your customers agree on a policy for your access to their Admin console.
Subscriptions purchased from Google
Your customers can also give you Admin Console access to subscriptions they've purchased directly from Google, such as Google Voice and Chrome Enterprise Upgrade.
The decision to provide support to your customer for the subscriptions they've purchased from Google is between you and your customer. Providing support to your customer for their direct subscriptions does not entitle you to any margins, and might not entitle you to any rebates, or other incentives from Google.
If a customer grants you access to their subscriptions purchased from Google, you have access to only these Admin console services.
Learn how customers can change a reseller’s access.
Go to a customer’s Admin console
- Sign in to the Partner Sales Console.
- On the Customers page, click the customer name.
- Under Quick links, click Admin console.
Reseller limitations in a customer's Admin console
You can do most tasks that an administrator can do in their own Google Admin console. To protect a customer's security and privacy, there are limitations.
In a customer's Admin console, you can't:
- Accept the Terms of Service agreement on behalf of the customer
- Generate transfer tokens
- View the customer's billing information
You can view a customer's billing information in your Partner Sales Console.
- Manage access settings for a Google Group or for a group in Google Groups for Business.
- For Google Essentials accounts that are email-verified, assign an admin role (other than the super admin role) to users.
For domain-verified accounts, you can assign any admin roles to users.
You also can't perform these advanced features:
- Use Email Log Search to troubleshoot missing messages
- Access the alert center
- Set administrator email alerts
- Add Security Assertion Markup Language (SAML) or single sign-on (SSO) apps
- Set Data Loss Prevention (DLP) rules
- Turn on Android app management
- Bind an enterprise mobility management (EMM) provider
Note: There might be limitations in addition to those listed here.